Privacy Policy
Thera.al
This policy explains how Thera Medica Group processes the personal data of visitors, partner pharmacies, and consumers who use Thera.al, create accounts, request quotations, or place orders. Before publication, Thera must verify that the description of data processing accurately reflects the tools and services actually enabled on the website.
1. Who Is Responsible for Your Data
The data controller is Thera Medica Group L.T.D., a company established under the laws of Albania, with business registration number (NUIS/NIPT) M41521041N and registered office at Rr. Ali Pashë Gucia, 7-storey building, staircase 1, 1st floor, Tirana, Albania, represented by the company’s administrator. Thera collects and processes customers’ personal data for the purposes described in this policy. For privacy-related questions or requests, please use the contact form on Thera.al.
Thera Medica Group L.T.D. is responsible for processing the personal data of customers and partner pharmacies on Thera.al. It determines the purposes and methods of processing for account management, orders, payments, deliveries, invoicing, and customer service. External service providers may process data on behalf of Thera when necessary for these services; their roles and the data they process must be reflected in accordance with the actual agreements in place.
2. Data We May Collect
Contact and identification information: first name, last name, email address, phone number, and billing or shipping address.
Order and account information: products ordered, order history, account preferences, and communications with customer service.
Pharmacy/B2B partner information: business name, address, registration number/NUIS, contact person, and information necessary for verification, quotations, supply, and invoicing.
Payment information: payment status and payment references. If payment is processed by an external provider, card details are handled by that provider rather than by Thera, unless the actual website configuration provides otherwise.
Technical information: IP address, device/browser information, security logs, and cookie-related information, depending on the actual website configuration.
3. Why We Use Your Data
We use personal data when necessary to create or manage accounts, process orders and payments, deliver products, issue fiscal documents, verify B2B accounts, respond to inquiries, secure the website, and comply with legal obligations.
For promotional communications, we use personal data only when we have an appropriate legal basis and, where required, your consent. You may unsubscribe from marketing communications at any time by using the relevant unsubscribe link or by contacting us.
For analytics and non-essential cookies, their implementation and the collection of consent must correspond to the actual cookie banner and website configuration.
4. Who We May Share Your Data With
Personal data may be shared only with parties necessary for operating our services, including website hosting and maintenance providers, payment service providers, couriers, invoicing/accounting system providers, CRM or email service providers, as well as professional advisers or authorities when required by law.
Thera uses hosting and website maintenance services, payment processing, delivery, invoicing, CRM, email, and other tools that are actually enabled on Thera.al. The person responsible for the website must verify the names and roles of the specific service providers and include them here before publication.
5. Data Retention and Security
Personal data is retained only for as long as necessary for the purposes described, account and order management, handling complaints, and complying with legal document retention requirements. Specific retention periods apply according to the type of data and the relevant legal obligations.
Thera uses appropriate technical and organizational measures to protect personal data. However, no electronic transmission or storage method can be guaranteed to be completely secure.
6. International Data Transfers
Some service providers may store or process data outside Albania or Kosovo. Before any transfer, Thera verifies the country where processing takes place and ensures that the required legal basis and safeguards are in place under applicable legislation. Specific information about the countries involved and the relevant safeguards is provided according to the service providers enabled on Thera.al.
7. Your Rights
Depending on applicable law, you may request information about and access to your personal data, its correction or deletion, restriction of or objection to its processing, and withdrawal of consent where processing is based on consent. Certain data cannot be deleted when the law requires its retention, for example, order or invoicing documentation.
Please submit your request through the contact form on Thera.al. You may also file a complaint with the competent data protection authority in Albania or Kosovo, depending on your location and the specific processing activity.
8. Cookies and Similar Technologies
Thera.al may use essential cookies for the operation of the shopping cart, user accounts, and website security. Analytics or advertising cookies are enabled only in accordance with your choices and the legally required configuration. You can change your preferences through the “Cookie Preferences” link on the website.
The list of cookies, their names, purposes, retention periods, and third parties must correspond to an actual scan of the website. Do not publish a cookie list copied from a template.
9. Updates and Contact Information
We may update this policy when our services, data processing practices, or legal requirements change. The updated version will be published on this page with the revision date.
This policy takes effect on the date it is published or updated on Thera.al. For any questions, please use the contact form on Thera.al or write to the company’s registered address: Rr. Ali Pashë Gucia, 7-storey building, staircase 1, 1st floor, Tirana, Albania.